CVE-2026-74294

ASoC: meson: aiu: Validate written enum values

State: Published
Severity: 7.3 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 15, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ASoC: meson: aiu: Validate written enum values

The AIU HDMI and internal codec mux put callbacks use the written enum value with snd_soc_enum_item_to_val() before checking whether the value is valid for the enumeration.

Reject out-of-range values before converting the enum item, matching the validation already done by the G12A HDMI and internal codec mux controls.

Scores

CVSS	Score	Vector	Source
3.1	7.3 High	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 91797708f99e4a910ab019760069c0a7e00a6fc0Affected b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 90703664dbc5a4bf3d84f649404318f3cafdbe69Affected b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 8a6d6735e7c02e88841cca1497ff3d8089f2ef24Affected b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 96f5b92d958bc34500500f29fab8e0b908f25397Affected b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 0965892cc486ca554d72eeb62d85ccf8d0137a5aAffected b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before d65adf85477247be04ac86886f8edfaa047b5d4aAffected
LinuxLinux	5.7Affected before 5.7Not affected 6.1.189 through 6.1.Not affected 6.6.158 through 6.6.Not affected 6.12.111 through 6.12.Not affected 6.18.53 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 91797708f99e4a910ab019760069c0a7e00a6fc0Affected
b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 90703664dbc5a4bf3d84f649404318f3cafdbe69Affected
b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 8a6d6735e7c02e88841cca1497ff3d8089f2ef24Affected
b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 96f5b92d958bc34500500f29fab8e0b908f25397Affected
b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before 0965892cc486ca554d72eeb62d85ccf8d0137a5aAffected
b82b734c0e9a75e1b956214ac523a8eb590f51f3 to before d65adf85477247be04ac86886f8edfaa047b5d4aAffected

LinuxLinux

5.7Affected
before 5.7Not affected
6.1.189 through 6.1.*Not affected
6.6.158 through 6.6.*Not affected
6.12.111 through 6.12.*Not affected
6.18.53 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.